CVE-2007-4970
ProcessGuard 3.410 - Denial of Service and Privilege Escalation via SSDT Hook Manipulation
Title source: llmDescription
ProcessGuard 3.410 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via kernel SSDT hooks for Windows Native API functions including (1) NtCreateFile, (2) NtCreateKey, (3) NtDeleteValueKey, (4) NtOpenFile, (5) NtOpenKey, and (6) NtSetValueKey.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/45954
Various Sources x_refsource_misc
http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php
Various Sources x_refsource_misc
http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/25714
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/479830/100/0/threaded
Scores
EPSS
0.0028
EPSS Percentile
20.3%
Details
CWE
CWE-20
Status
published
Products (1)
diamondcs/processguard
3.410
Published
Sep 19, 2007
Tracked Since
Feb 18, 2026